Skip to content
OpenAdvisories

Vendor

ItzCrazyKns

2 known vulnerabilities.

Products

Vane 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-9372

    ItzCrazyKns Vane Model Provider API route.ts server-side request forgery

    A flaw has been found in ItzCrazyKns Vane up to 1.12.1. This vulnerability affects unknown code of the file src/app/api/providers/route.ts of the component Model Provider API. This manipulation of the argument baseURL causes server-side request forgery. Remot…

    ItzCrazyKns Vane